Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/1-6aebUsjGigWCkXwDxAfu7JbH3A.roa
File: 1-6aebUsjGigWCkXwDxAfu7JbH3A.roa (raw, json)
Hash identifier: Hduo/JWxIEmIyeyIi7MQm4M+Xp8ECRaddxhqWZRPV6c=
Subject key identifier: FB:A6:9E:6D:4B:23:1A:28:16:0A:45:F0:0F:10:1F:BB:B2:5B:1F:70
Certificate issuer: /CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
Certificate serial: 01941FFA7C1CCCDE4D5E46D5F19D6972479B
Authority key identifier: DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/1-6aebUsjGigWCkXwDxAfu7JbH3A.roa
Signing time: Wed 01 Jan 2025 03:48:16 +0000
ROA not before: Wed 01 Jan 2025 03:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60159
IP address blocks: 194.146.188.0/22 maxlen: 22
194.146.189.0/24 maxlen: 24
194.146.190.0/24 maxlen: 24
194.146.191.0/24 maxlen: 24
2a0c:d540::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7c:1c:cc:de:4d:5e:46:d5:f1:9d:69:72:47:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fba69e6d4b231a28160a45f00f101fbbb25b1f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:85:4d:81:8f:39:94:d3:6e:22:7d:c1:5e:
8b:72:be:23:66:34:51:6e:73:ec:e3:c9:5b:08:4d:
f1:d5:5d:b1:94:bf:f1:f3:b6:38:2a:99:ae:91:0c:
00:92:4a:60:a5:4b:8e:72:ae:2d:05:7a:eb:b3:25:
0e:25:47:0f:b5:28:8e:8e:19:b1:64:a0:0a:43:da:
16:9d:ca:b2:02:57:b2:2b:ac:48:54:13:30:3d:4d:
e3:61:7c:b6:b9:cf:ad:34:1c:ae:af:fa:16:c7:d0:
1e:2d:0c:f5:34:5c:9c:1c:3f:8f:79:50:9a:cc:b6:
b4:90:75:f7:f6:f6:8e:2d:fb:e6:9a:2e:b9:e0:df:
f5:fb:b4:c0:4f:a3:1b:a8:3b:99:9e:30:57:14:c4:
11:b0:5b:3d:6a:84:d7:b8:da:b5:1a:cb:2f:89:57:
a4:8d:c8:b8:0e:c1:c2:6a:d5:21:55:cb:46:92:71:
88:a9:13:bb:bd:3a:da:ab:44:ca:bf:89:29:0c:34:
fa:6a:45:76:36:ba:42:42:aa:22:32:72:91:28:04:
91:d2:be:bc:c7:d5:37:78:10:9b:51:5c:90:04:f4:
fd:65:bd:4d:3d:8b:be:50:35:25:06:35:5c:1b:94:
9f:17:15:91:05:9f:56:df:28:a6:bb:d7:5a:61:67:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A6:9E:6D:4B:23:1A:28:16:0A:45:F0:0F:10:1F:BB:B2:5B:1F:70
X509v3 Authority Key Identifier:
keyid:DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/1-6aebUsjGigWCkXwDxAfu7JbH3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.188.0/22
IPv6:
2a0c:d540::/32
Signature Algorithm: sha256WithRSAEncryption
b6:f0:4d:08:4f:0c:1a:b4:87:36:3b:02:b1:63:2b:d5:c4:42:
6c:62:5c:c8:1a:ad:c4:47:9d:e5:52:5d:32:89:fd:c5:59:50:
a9:ab:f6:83:8c:d9:f0:3a:17:55:a7:50:6c:e0:e6:f7:b4:bf:
42:9f:41:6b:14:dd:6e:a2:7a:f2:e7:66:7b:be:10:cc:c9:f2:
5d:ee:d4:83:be:92:5c:17:b1:7e:40:07:be:66:e2:88:e6:f7:
12:d9:7b:c6:29:2a:d5:4f:a2:72:51:6a:d5:70:ba:d5:fd:bd:
08:ba:9f:58:43:ef:b4:72:67:29:21:4b:0e:dc:1d:e6:19:ab:
17:b6:33:93:30:06:44:0a:19:a1:9b:76:03:1f:5d:f9:a5:9f:
eb:d5:47:2d:09:7c:30:34:6d:bd:2c:1c:23:55:ff:44:2b:73:
a7:ee:2b:cc:49:58:c7:ae:9e:46:7d:30:9e:60:ba:68:6e:43:
98:46:15:01:9d:85:82:61:cf:7a:bb:ea:ff:72:74:14:41:d0:
b1:0b:4d:8c:26:f8:05:01:7f:fd:52:23:52:c5:db:0c:48:0d:
e3:58:88:d6:f2:2b:c0:d3:f1:51:0b:15:6a:50:e2:75:99:3f:
9a:53:d5:fa:e2:23:4f:80:77:10:48:ed:37:55:ea:bf:40:e6:
cc:60:ea:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:01 2025 by rpki-client